Notice: While JavaScript is not essential for this website, your interaction with the content will be limited. Please turn JavaScript on for the full experience.

Python 3.7.14

Release Date: Sept. 6, 2022

Note: The release you are looking at is Python 3.7.14, a security bugfix release for the legacy 3.7 series which is now in the security fix phase of its life cycle. See the downloads page for currently supported versions of Python and for the most recent source-only security fix release for 3.7. The final bugfix release with binary installers for 3.7 was 3.7.9.

Please see the Full Changelog link for more information about the contents of this release and see What’s New In Python 3.7 for more information about 3.7 features.

Security content in this release

  • CVE-2020-10735: converting between int and str in bases other than 2 (binary), 4, 8 (octal), 16 (hexadecimal), or 32 such as base 10 (decimal) now raises a ValueError if the number of digits in string form is above a limit to avoid potential denial of service attacks due to the algorithmic complexity.
  • gh-87389: http.server: Fix an open redirection vulnerability in the HTTP server when an URI path starts with //.
  • gh-93065: Fix contextvars HAMT implementation to handle iteration over deep trees to avoid a potential crash of the interpreter.
  • gh-80254: Raise ProgrammingError instead of segfaulting on recursive usage of cursors in sqlite3 converters.

Full Changelog


Version Operating System Description MD5 Sum File Size GPG Sigstore
Gzipped source tarball Source release dd65d6708e9c28a9e4fd2e986776ad14 24033206 SIG CRT SIG
XZ compressed source tarball Source release 0acdd6e1a95f49ee7f9b338fb6092b65 18121168 SIG CRT SIG